OWASP Top 10

OWASP Top 10 2025: Access Control Issues, Security Misconfigurations, Supply Chain Issues Top App Risk List

November 21, 2025

With the first new release since 2021, the one thing that hasn't changed about the OWASP Top 10 is that "broken access control" is still the lead category after all this time, present as a security risk in 3.73% of the apps that were tested.

OWASP Top 10

OWASP Top 10 2025: Access Control Issues, Security Misconfigurations, Supply Chain Issues Top App Risk List

Leak of Microsoft Meeting Documents Indicates Company Is Struggling to Keep Up With Security Vulnerabilities Uncovered by Mythos

Cyber Attack by Suspected Iranian Hackers Hits 36 Minnesota Water Utilities, Causing Outages

Feds Warn About Iranian Hackers Expanding the List of Targeted PLCs to Compromise Critical Infrastructure

Out-of-Control AI Agent Strikes Again, Hacks Accounts at Four Additional Services